Does anyone have any insight to when (or if) Jamf Security Cloud will be available on MacOS and Windows?I see the options as not yet supported, but wondering if there is a timeline on that.   

We’re about to sell roughly 600 of our old Macs, and I need to offboard them by removing the MDM profile before releasing them from ASM.Doing them one by one isn't practical, so I’m looking for the best way to handle this in bulk. I already have all the machines grouped into a Smart Group. I remember hearing that I need to completely strip this group out of the scope of all active Policies and Configuration Profiles first so nothing breaks or re-applies.I ran into some issues the last time I tried a mass offboarding a few years back, so I want to make sure I get it right this time. What is the safest, most seamless way to push the bulk "Unenroll" or profile removal command to a whole group at once?

We recently laid off 14 people and were going to gift them their M1 Laptops after they were off-boarded.  I issued Lock Computer commands from JAMF Pro to each machine and, to my surprise, found that only 3 of the 14 had actually locked out the user.   Luckily, these folks were all friends of the company (sad) and they did not do anything malicious, but I was able to use my TeamViewer link to the machine to go in and ‘removeFramework’ and re-enroll.   After that, I was able to wipe the machines normally.   Is there a way to get the rest of my machines back into compliance without removing the framework and re-enrolling them, one by one?  Will a ‘renewDeviceCert’ work?  Thanks. 

*Trying to get ahead of OS27 and the devices that can’t update*We have a requirement that all Apple mobile devices can support the latest OS update.  Based on early reports, we will have 100+ iPads that won’t support OS27.  I need to be able to block those devices completely.  We have departments that will attempt to keep them, but I need to make sure they can’t use them.Current setup is Jamf Pro for MDM and Entra for compliance.  We currently use Smart Device Groups and Entra Conditional Access to block Microsoft apps from devices that don’t meet criteria to be in our compliance smart group.  I wasn’t sure if there is a way to completely block in Entra Conditional Access or if there is a way to wipe and ban the device in Jamf Pro.  If not, is there a way to block all apps or put it into a kiosk mode if it isn’t eligible for OS27?Any suggestions will be greatly appreciated!

I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFiles/DiskMan

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

I am trying to install sophos through JAMF School and used their script.The script it working fine when running it on the mac as sudo, but when i try pushing it through JAMF, nothing happens.This makes me wonder if i am missing something, i seem to be unable to make the app run as an administrator/sudo user.Can anyone help?

Hello,I'm trying to understand the recommended workflow for a school using both Microsoft Entra ID federation and Apple School Manager / Jamf School synchronization.Current setup:Apple School Manager is already federated with Microsoft Entra ID.\tAll Managed Apple IDs have already been created successfully.\tWe currently have only one ASM location (the original/default location).\tJamf School is already connected to ASM and synchronized with that location.\tOur goal is simply to create and synchronize classes/rosters for Apple Classroom and Jamf School.The issue:If I manually create my classes in Apple School Manager and assign students and teachers to them, everything works correctly after the synchronization between Jamf School and ASM.However, how should this be handled when using a OneRoster/SFTP import into Apple School Manager?When I enable SFTP / OneRoster synchronization from Jamf School to Apple School Manager, ASM creates a new location instead of associating the imported classes

I’m currently rebuilding our enrollment process and testing everything in a Jamf sandbox. So far it mostly works as expected, but I’ve run into an issue that I can’t fully explain.This is how my flow looks right now.macOS 26.2In PreStage Enrollment I deploy:\tJamfConnectLogin-3.5.0.pkg\t\t\tdialog-2.5.6-4805.pkg (used for Setup Your Mac)\t\t\ticons.pkg (icons used by Setup Your Mac)\tWhen it comes to configuration profiles related to Jamf Connect, I’m using:\tJamf Connect License\t\t\tJamf Connect Login (login window configuration)\t\t\tJamf Connect Menu Bar\tThe flow itself:I start the Mac, choose Enroll, and no local account is created during enrollment. After configuration finishes, I get the Jamf Connect login window (which is exactly what I want and how it works in production). I log in with Okta credentials, the local account is created, and then the “enrollment completed” trigger fires Setup Your Mac. Apps and scripts install as expected.However, at the same time I get a keychain prompt saying:

We use Jamf Pro and have an integration with Conditional Access to register Macbooks within Microsoft Intune.We have recently started receiving this error message and have not been able to resolve it. Who can help me think about how we can tackle this issue?

In Jamf Pro, We have policies to install the 2024 Microsoft Office suite LTSC during our Provision policy which is a script that calls each policy to install individual pieces of software we want to install on a Mac.Here is the order for the Microsoft install we have 2 policies:1. Install 2024 Microsoft Office 16.106.26020821.pkg(This is the older version from February. Testing. I tried the lastest version too)2. Install Microsoft_Office_LTSC_2024_VL_Serializer.pkg(I have also tried swapping the order)Ever since I can remember this has worked exactly as intended. The Office suite is installed then the volume serializer is installed to activate the license. At first launch it opens to the templates/recent documents page.However, over the last couple weeks of testing, the activation is no longer applying. I’ve tried everything I can to try and deactivate the license/reactivate it, but the only fix appears to be completely removing all office components, and reinstalling them - only then

Hey,I am just wondering if anyone else got the same expierence?After installing the latest DisplayLink Update, it turned out that the previous working configuration Profile is broken. Every time I open the Tool from the Apple Menu, the Splash Screen comes up again.This is the Profile in User Level (I tried also Computer Level) which worked fine on the previous version:PLIST file containing key value pairs for settings in the specified domain<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict>\t<key>AppAutostart</key>\t<string>1</string>\t<key>SilentSetup</key>\t<string>1</string></dict></plist> 

Hey everyone, new jamf admin here who inherited a mess and is trying to clean it up. I was hoping someone knew how I would be able to find out why my Mac apps are not downloading/installing to any devices. We used the cloud DP to install these apps and for the most part they would install with no real issue but over the last 2 weeks all of them seem to be stuck on “In Progress” and nothing we do moves it along. Does anyone have any advice on how I can find where the bottleneck is or point me in the right direction? I believe it may have to do with an outdated version of jamf connect that the previous tech never updated but since I’m still pretty new I am not sure. We’ve already checked the APN as well as making sure we have enough licenses but for some reason no apps want to download or install on any of our managed macs. 

How to bulk lost mode a smart group of ipads in Jamf Pro?I have a smart group but lost mode is not one of the available remote commands?Suggestions?

I am currently looking for a Jamf / macOS Specialist or Apple MDM Engineer role and would love to hear about any openings within this community.I bring solid experience in:• Jamf Pro administration & device management• macOS / iOS MDM (Kandji/Iru, Mosyle)• Apple Business Manager• Bash scripting• Endpoint security & complianceOpen to full-time, contract, or remote opportunities worldwide.If you have any leads or openings, please feel free to reply or DM me. I appreciate any help!Thank you! 🙏

Today we released Jamf Connect 3.10.0; this release addresses the following product issue:Fixed: When deployed with macOS Setup Assistant via Jamf Pro PreStage enrollment, the Jamf Connect login window may display preferences without their expected values instead of reviewing and caching all settings when the app initially loads. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Apple’s Keynote is on Monday, June 8, 2026. Below are calendar reminders. Details: WWDC will bring the unveiling of major new software versions that will ship this fall, including: • iOS 27• iPadOS 27• macOS 27• watchOS 27• tvOS 27• visionOS 27 * Rumors indicate that Apple has three main focuses this year: the new Siri and other AI upgrades, Liquid Glass refinements, and bug fixes/performance improvements. KeynoteAdd to calendar Platforms State of the UnionAdd to calendar 

Hey Jamf Nation, 🚨 Big reward alert!!! 🚨 From June 1st through August 31st, enrol in a Jamf 200 Course and earn 500 points in Jamf Nation Rewards just for getting started. Once you complete your certification, you’ll pick up another 250 points! Up to 750 points, just for levelling up your skills! Here's how it works:Enrol in the Jamf 200 Course between June 1st and August 31st → earn 500 points\tComplete your Jamf 200 certification → earn an additional 250 pointsYou don't need to finish the course during the promotional period, you just need to enrol by August 31st to qualify for the initial 500 points. The extra 250 points will be awarded once you pass your certification, whenever that happens. Ready to dive in? Head to the Jamf 200 Course page to find out more and get enrolled. Want to prep before you start? Check out the Training page on Jamf Nation for tips and tricks, blog posts and insights straight from our Trainers. It's a great place to get inspired before you kick things off

Hi, I’m looking how to automatically set TimeZone on Macs after the enrollement step.How can i do this?Thank you

Hello! We use Jamf School to manage our iPads. The last few months they have been dropping their wifi connection. They have been updated to the latest OS, have been erased and re-enrolled. I have looked through all the settings, and nothing has been changed. I am the only person who uses this system and I haven’t made any changes. Is anyone else having this issue?

Bonjour à tous 🖥️🍎,Nous sommes ravis de vous annoncer la création du Mac User Group Paris — un espace convivial pour les passionnés d’Apple, professionnels ou curieux, qui souhaitent échanger, apprendre et partager autour de l’écosystème macOS, iOS, et des outils de gestion d’entreprise. L’objectif à venir est de créer au moins un événement par trimestre, avec des intervenants et intervenantes divers, dans une ambiance conviviale.  📌 Sponsorisé par Jamf — merci à eux pour leur soutien ! ⚠️ Note : Ce groupe n’est pas affilié directement à Jamf, mais bénéficie de leur appui logistique et technique.📅 Premier événement : Jeudi 11 juin prochain, vers 17h30-18h, pour un debrief de la WWDC 2026 ! On discutera des nouveautés annoncées par Apple, avec un focus particulier sur les annonces concernant la gestion des appareils Apple.📍 Lieu à confirmer (restez connectés ! Mais ça sera sûrement dans le 13e…)🕒 Horaires et programme à venir — inscrivez-vous dès maintenant pour ne rien manquer !\ud83d

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong?  

I uploaded our vpptoken for volume purchasing and Jamf p7m token from Apple School Manager to Jamf and now our fleet of iOS devices are stuck in pending. I realized too late that I downloaded the tokens from a different apple ID than in previous years and I suspect this is a big no no. I went back and renewed the tokens with the proper apple ID, uploading them to jamf, but I think the damage has been done. I wiped one device and reenrolled it and it took all the policies and is currently checking in fine after my mistake. I did use the right apple ID for our APN renewal and so all of our laptops are updating and checking in as normal. Long short of it - is there anyway to fix this other than manually reenrolling all our iOS devices. Thankfully, we have a small fleet and this isn’t the end of the world, but if there is a workaround I’d greatly appreciate knowing it. 

Hey everyone!Our next Music City Mac Admins User Group meetup is next Friday at WeWork in East Nashville.This month, we’ll be talking about WWDC, what we think Apple might announce, and what those announcements could mean for Apple admins. Since conference season is also underway, we’ll spend part of the meetup discussing upcoming conferences and why attending at least one per year, when possible, can be valuable for learning, networking, and staying connected to the broader Mac Admins community.Doors open at 4:30 PM for social time, and we’ll get started around 5:15 PM. Register here!Unable to attend in person? Attend virtually by clicking the link here.Looking forward to seeing you next Friday!

There’s a certain irony in traveling 3,500 miles to Leiden only to feel like I was heading home.I’m a New Yorker now, living in Yonkers—a city that owes its very name to the Dutch. It comes from the title Jonkheer (or “Young Lord”), the nickname for Adriaen van der Donck. Back in the day, the area was simply known as “The Jonkheer’s land.” As the years passed and the English took over, “Jonkheer” evolved into “Yonkers.” So, when the opportunity came to attend MacAdmins-EU in Leiden, Amsterdam, it was an immediate “yes.” I wasn’t just visiting the “Old World”; I was tracing a line back to where the story of my hometown began. The Jordy Factor The spark for this trip started when ​@Jordy-Thery told me to “save the date” for the end of April. He couldn’t say much more at the time, but I was already sold. I’ve followed Jordy on the #macadmins Slack and LinkedIn for years, finally meeting him in person at an event in Nashville a few years back. He represents the soul of this community—a lea